grails - 如何在 grails 3.3.9 中为禁止的 url 访问显示自定义错误页面

Question

我的 chalice 3.3.9应用程序有不同的模块实现不同的ROLE使用 Spring 安全性的基于访问。
AdminController 通过 ROLE_ADMIN 访问.
如果非管理员用户登录并尝试访问 Admin URL然后 grails 显示[Image] Grails Error Message: Sorry, you're not authorized to view this page.
我想显示我的自定义消息。[Image: ] Custom Message: 403 Access Forbidden

application.groovy

grails.plugin.springsecurity.interceptUrlMap = [
        [pattern: '/user/**', access: ['IS_AUTHENTICATED_FULLY']],
        [pattern: '/role/**', access: ['ROLE_ADMIN']],
        [pattern: '/', access: ['IS_AUTHENTICATED_FULLY']],
        [pattern: '/admin/*', access: ['ROLE_ADMIN']]]

URLMappings

"500"(controller: "error", action: "internalServerError")
"404"(controller: "error", action: "notFound")
"403" (controller: "error", action: "forbidden")
"403"(view: "/error/forbidden")

我个人有 403 . 500 & 404工作正常。

Answer 1

在 URlMappings 中，您可以设置到响应代码的映射并选择一个 Controller 或 View 来响应 - 例如:

static mappings = {
    // ... other mappings ...
    // Send 403's to a controller if you'd like to do additional logic
    "403"(controller: "errors", action: "forbidden")
    // Or just render a static view under grails-app/views/errors/forbidden.gsp
    "403"(view: "/errors/forbidden")
}

见: http://docs.grails.org/4.0.1/guide/single.html#mappingToResponseCodes